@predicatesystems/authority 0.3.2 → 0.3.3

package/dist/canonicalization/desktop.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Desktop accessibility tree canonicalization for reproducible state hashes.
+ *
+ * This module provides canonical normalization for desktop accessibility snapshots,
+ * ensuring that equivalent UI states produce identical hashes regardless of
+ * superficial differences (whitespace, element order, transient attributes).
+ */
+import { type Platform } from "./utils.js";
+/**
+ * Raw accessibility tree node from the runtime environment.
+ */
+export interface AccessibilityNode {
+    role?: string;
+    name?: string;
+    children?: AccessibilityNode[];
+    pid?: number;
+    position?: {
+        x: number;
+        y: number;
+    };
+    focused?: boolean;
+    selected?: boolean;
+}
+/**
+ * Raw desktop accessibility snapshot from the runtime environment.
+ */
+export interface DesktopAccessibilitySnapshot {
+    app_name?: string;
+    window_title?: string;
+    focused_role?: string;
+    focused_name?: string;
+    ui_tree?: AccessibilityNode;
+    ui_tree_text?: string;
+    platform?: Platform;
+    observed_at?: string;
+    confidence?: number;
+}
+/**
+ * Canonical accessibility node with normalized fields.
+ */
+export interface CanonicalAccessibilityNode {
+    role: string;
+    name_norm: string;
+    children: CanonicalAccessibilityNode[];
+}
+/**
+ * Canonical desktop snapshot with normalized fields.
+ *
+ * This is the deterministic representation used for hashing.
+ */
+export interface CanonicalDesktopSnapshot {
+    app_name_norm: string;
+    window_title_norm: string;
+    focused_path: string;
+    tree_hash: string;
+    platform: Platform;
+}
+/**
+ * Canonicalize an accessibility tree node.
+ *
+ * Normalizes:
+ * - `role`: Lowercase, trimmed
+ * - `name`: Text normalization (whitespace, case, length)
+ * - `children`: Recursively canonicalized, sorted by (role, name)
+ *
+ * Ignores transient attributes: pid, position, focused, selected.
+ *
+ * @param node - Raw accessibility node
+ * @param depth - Current depth (for truncation)
+ * @returns Canonical node
+ */
+export declare function canonicalizeAccessibilityNode(node: AccessibilityNode | null | undefined, depth?: number): CanonicalAccessibilityNode;
+/**
+ * Build a focused element path string.
+ *
+ * Creates a path like "window/toolbar/button[Save]" representing
+ * the path to the focused element in the accessibility tree.
+ *
+ * @param focusedRole - Role of the focused element
+ * @param focusedName - Name of the focused element
+ * @returns Path string
+ */
+export declare function buildFocusedPath(focusedRole?: string, focusedName?: string): string;
+/**
+ * Canonicalize a desktop accessibility snapshot.
+ *
+ * Normalizes all fields to produce a deterministic representation:
+ * - `app_name`: Lowercase, trimmed
+ * - `window_title`: Text normalization (capped at 100 chars)
+ * - `focused_path`: Built from focused element info
+ * - `tree_hash`: SHA-256 of canonical tree JSON
+ *
+ * @param snapshot - Raw desktop accessibility snapshot
+ * @returns Canonical snapshot for hashing
+ */
+export declare function canonicalizeDesktopSnapshot(snapshot: DesktopAccessibilitySnapshot): CanonicalDesktopSnapshot;
+/**
+ * Compute state hash for a desktop accessibility snapshot.
+ *
+ * The hash includes all canonical fields in a deterministic order.
+ * Platform is included because different platforms have different
+ * accessibility APIs and security contexts.
+ *
+ * @param snapshot - Raw or canonical desktop snapshot
+ * @returns SHA-256 hash prefixed with "sha256:"
+ */
+export declare function computeDesktopStateHash(snapshot: DesktopAccessibilitySnapshot | CanonicalDesktopSnapshot): string;
+/**
+ * Current schema version for desktop canonicalization.
+ *
+ * Increment major version for breaking changes to canonical format.
+ * Increment minor version for additions that don't change existing hashes.
+ */
+export declare const DESKTOP_SCHEMA_VERSION = "desktop:v1.0";
+//# sourceMappingURL=desktop.d.ts.map

package/dist/canonicalization/desktop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop.d.ts","sourceRoot":"","sources":["../../src/canonicalization/desktop.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,QAAQ,EAAyB,MAAM,YAAY,CAAC;AAMlE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAE/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,EAC1C,KAAK,SAAI,GACR,0BAA0B,CAyC5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAaR;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,4BAA4B,GACrC,wBAAwB,CAsB1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,4BAA4B,GAAG,wBAAwB,GAChE,MAAM,CAgBR;AAoCD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,iBAAiB,CAAC"}

package/dist/canonicalization/desktop.js

@@ -0,0 +1,187 @@
+/**
+ * Desktop accessibility tree canonicalization for reproducible state hashes.
+ *
+ * This module provides canonical normalization for desktop accessibility snapshots,
+ * ensuring that equivalent UI states produce identical hashes regardless of
+ * superficial differences (whitespace, element order, transient attributes).
+ */
+import { normalizeText, sha256 } from "./utils.js";
+// =============================================================================
+// Constants
+// =============================================================================
+/** Maximum depth for UI tree canonicalization */
+const MAX_TREE_DEPTH = 10;
+/** Maximum children per node */
+const MAX_CHILDREN_PER_NODE = 50;
+/** Maximum length for window title */
+const MAX_WINDOW_TITLE_LENGTH = 100;
+// =============================================================================
+// Accessibility Node Canonicalization
+// =============================================================================
+/**
+ * Canonicalize an accessibility tree node.
+ *
+ * Normalizes:
+ * - `role`: Lowercase, trimmed
+ * - `name`: Text normalization (whitespace, case, length)
+ * - `children`: Recursively canonicalized, sorted by (role, name)
+ *
+ * Ignores transient attributes: pid, position, focused, selected.
+ *
+ * @param node - Raw accessibility node
+ * @param depth - Current depth (for truncation)
+ * @returns Canonical node
+ */
+export function canonicalizeAccessibilityNode(node, depth = 0) {
+    if (!node) {
+        return { role: "", name_norm: "", children: [] };
+    }
+    const role = (node.role ?? "").toLowerCase().trim();
+    const nameNorm = normalizeText(node.name);
+    // Truncate at max depth
+    if (depth >= MAX_TREE_DEPTH) {
+        return {
+            role,
+            name_norm: nameNorm,
+            children: [], // Truncated
+        };
+    }
+    // Canonicalize children
+    let children = [];
+    if (node.children && Array.isArray(node.children)) {
+        // Limit children count
+        const limitedChildren = node.children.slice(0, MAX_CHILDREN_PER_NODE);
+        // Canonicalize each child
+        children = limitedChildren.map((child) => canonicalizeAccessibilityNode(child, depth + 1));
+        // Sort children by (role, name_norm) for determinism
+        children.sort((a, b) => {
+            const roleCompare = a.role.localeCompare(b.role);
+            if (roleCompare !== 0)
+                return roleCompare;
+            return a.name_norm.localeCompare(b.name_norm);
+        });
+    }
+    return {
+        role,
+        name_norm: nameNorm,
+        children,
+    };
+}
+/**
+ * Build a focused element path string.
+ *
+ * Creates a path like "window/toolbar/button[Save]" representing
+ * the path to the focused element in the accessibility tree.
+ *
+ * @param focusedRole - Role of the focused element
+ * @param focusedName - Name of the focused element
+ * @returns Path string
+ */
+export function buildFocusedPath(focusedRole, focusedName) {
+    const role = (focusedRole ?? "").toLowerCase().trim();
+    const name = normalizeText(focusedName);
+    if (!role && !name) {
+        return "";
+    }
+    if (!name) {
+        return role;
+    }
+    return `${role}[${name}]`;
+}
+// =============================================================================
+// Desktop Snapshot Canonicalization
+// =============================================================================
+/**
+ * Canonicalize a desktop accessibility snapshot.
+ *
+ * Normalizes all fields to produce a deterministic representation:
+ * - `app_name`: Lowercase, trimmed
+ * - `window_title`: Text normalization (capped at 100 chars)
+ * - `focused_path`: Built from focused element info
+ * - `tree_hash`: SHA-256 of canonical tree JSON
+ *
+ * @param snapshot - Raw desktop accessibility snapshot
+ * @returns Canonical snapshot for hashing
+ */
+export function canonicalizeDesktopSnapshot(snapshot) {
+    const platform = snapshot.platform ?? detectPlatform();
+    // Canonicalize the UI tree if present
+    let treeHash;
+    if (snapshot.ui_tree) {
+        const canonicalTree = canonicalizeAccessibilityNode(snapshot.ui_tree);
+        treeHash = sha256(JSON.stringify(canonicalTree));
+    }
+    else if (snapshot.ui_tree_text) {
+        // Fallback: hash the raw text if no structured tree
+        treeHash = sha256(normalizeText(snapshot.ui_tree_text, 10000));
+    }
+    else {
+        treeHash = sha256("");
+    }
+    return {
+        app_name_norm: normalizeText(snapshot.app_name),
+        window_title_norm: normalizeText(snapshot.window_title, MAX_WINDOW_TITLE_LENGTH),
+        focused_path: buildFocusedPath(snapshot.focused_role, snapshot.focused_name),
+        tree_hash: treeHash,
+        platform,
+    };
+}
+/**
+ * Compute state hash for a desktop accessibility snapshot.
+ *
+ * The hash includes all canonical fields in a deterministic order.
+ * Platform is included because different platforms have different
+ * accessibility APIs and security contexts.
+ *
+ * @param snapshot - Raw or canonical desktop snapshot
+ * @returns SHA-256 hash prefixed with "sha256:"
+ */
+export function computeDesktopStateHash(snapshot) {
+    // Canonicalize if not already canonical
+    const canonical = isCanonicalDesktopSnapshot(snapshot)
+        ? snapshot
+        : canonicalizeDesktopSnapshot(snapshot);
+    // Build deterministic JSON (sorted keys)
+    const hashInput = JSON.stringify({
+        app_name_norm: canonical.app_name_norm,
+        focused_path: canonical.focused_path,
+        platform: canonical.platform,
+        tree_hash: canonical.tree_hash,
+        window_title_norm: canonical.window_title_norm,
+    });
+    return `sha256:${sha256(hashInput)}`;
+}
+// =============================================================================
+// Helpers
+// =============================================================================
+/**
+ * Detect the current platform.
+ */
+function detectPlatform() {
+    const p = process.platform;
+    if (p === "darwin" || p === "linux" || p === "win32") {
+        return p;
+    }
+    // Default to linux for unknown Unix-like platforms
+    return "linux";
+}
+/**
+ * Type guard to check if a snapshot is already canonical.
+ */
+function isCanonicalDesktopSnapshot(snapshot) {
+    return ("app_name_norm" in snapshot &&
+        "window_title_norm" in snapshot &&
+        "focused_path" in snapshot &&
+        "tree_hash" in snapshot);
+}
+// =============================================================================
+// Schema Version
+// =============================================================================
+/**
+ * Current schema version for desktop canonicalization.
+ *
+ * Increment major version for breaking changes to canonical format.
+ * Increment minor version for additions that don't change existing hashes.
+ */
+export const DESKTOP_SCHEMA_VERSION = "desktop:v1.0";
+//# sourceMappingURL=desktop.js.map

package/dist/canonicalization/desktop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop.js","sourceRoot":"","sources":["../../src/canonicalization/desktop.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAiB,aAAa,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAyDlE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,iDAAiD;AACjD,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,gCAAgC;AAChC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,sCAAsC;AACtC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,gFAAgF;AAChF,sCAAsC;AACtC,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAA0C,EAC1C,KAAK,GAAG,CAAC;IAET,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1C,wBAAwB;IACxB,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,EAAE,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,GAAiC,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,uBAAuB;QACvB,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAEtE,0BAA0B;QAC1B,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,6BAA6B,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAChD,CAAC;QAEF,qDAAqD;QACrD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrB,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,WAAW,KAAK,CAAC;gBAAE,OAAO,WAAW,CAAC;YAC1C,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAoB,EACpB,WAAoB;IAEpB,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAExC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC;AAC5B,CAAC;AAED,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAsC;IAEtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IAEvD,sCAAsC;IACtC,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG,6BAA6B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACjC,oDAAoD;QACpD,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,OAAO;QACL,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/C,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;QAChF,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC;QAC5E,SAAS,EAAE,QAAQ;QACnB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAiE;IAEjE,wCAAwC;IACxC,MAAM,SAAS,GAAG,0BAA0B,CAAC,QAAQ,CAAC;QACpD,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAE1C,yCAAyC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;KAC/C,CAAC,CAAC;IAEH,OAAO,UAAU,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;GAEG;AACH,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,mDAAmD;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CACjC,QAAiE;IAEjE,OAAO,CACL,eAAe,IAAI,QAAQ;QAC3B,mBAAmB,IAAI,QAAQ;QAC/B,cAAc,IAAI,QAAQ;QAC1B,WAAW,IAAI,QAAQ,CACxB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC"}

package/dist/canonicalization/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Canonicalization module for non-web state evidence.
+ *
+ * This module provides consistent normalization for terminal and desktop
+ * accessibility snapshots, ensuring reproducible state hashes across
+ * different runs, platforms, and environments.
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   canonicalizeTerminalSnapshot,
+ *   computeTerminalStateHash,
+ *   canonicalizeDesktopSnapshot,
+ *   computeDesktopStateHash,
+ * } from "@predicatesystems/authority/canonicalization";
+ *
+ * // Terminal session
+ * const terminalHash = computeTerminalStateHash({
+ *   session_id: "sess-123",
+ *   cwd: "~/projects/myapp",
+ *   command: "npm  test",  // Extra whitespace normalized
+ *   transcript: "\x1b[32mPASS\x1b[0m all tests",  // ANSI stripped
+ * });
+ *
+ * // Desktop accessibility
+ * const desktopHash = computeDesktopStateHash({
+ *   app_name: "Firefox",
+ *   window_title: "  GitHub - My Repo  ",  // Whitespace normalized
+ *   focused_role: "button",
+ *   focused_name: "Submit",
+ * });
+ * ```
+ *
+ * @module canonicalization
+ */
+export { type Platform, normalizeText, normalizeCommand, stripAnsi, normalizeTimestamps, normalizeTranscript, normalizePath, isSecretKey, hashEnvironment, sha256, } from "./utils.js";
+export { type TerminalSessionSnapshot, type CanonicalTerminalSnapshot, canonicalizeTerminalSnapshot, computeTerminalStateHash, TERMINAL_SCHEMA_VERSION, } from "./terminal.js";
+export { type AccessibilityNode, type DesktopAccessibilitySnapshot, type CanonicalAccessibilityNode, type CanonicalDesktopSnapshot, canonicalizeAccessibilityNode, buildFocusedPath, canonicalizeDesktopSnapshot, computeDesktopStateHash, DESKTOP_SCHEMA_VERSION, } from "./desktop.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/canonicalization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/canonicalization/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAMH,OAAO,EAEL,KAAK,QAAQ,EAEb,aAAa,EACb,gBAAgB,EAEhB,SAAS,EACT,mBAAmB,EAEnB,mBAAmB,EAEnB,aAAa,EAEb,WAAW,EACX,eAAe,EAEf,MAAM,GACP,MAAM,YAAY,CAAC;AAMpB,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAE9B,4BAA4B,EAC5B,wBAAwB,EAExB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAMvB,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAE7B,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EAEvB,sBAAsB,GACvB,MAAM,cAAc,CAAC"}

package/dist/canonicalization/index.js

@@ -0,0 +1,68 @@
+/**
+ * Canonicalization module for non-web state evidence.
+ *
+ * This module provides consistent normalization for terminal and desktop
+ * accessibility snapshots, ensuring reproducible state hashes across
+ * different runs, platforms, and environments.
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   canonicalizeTerminalSnapshot,
+ *   computeTerminalStateHash,
+ *   canonicalizeDesktopSnapshot,
+ *   computeDesktopStateHash,
+ * } from "@predicatesystems/authority/canonicalization";
+ *
+ * // Terminal session
+ * const terminalHash = computeTerminalStateHash({
+ *   session_id: "sess-123",
+ *   cwd: "~/projects/myapp",
+ *   command: "npm  test",  // Extra whitespace normalized
+ *   transcript: "\x1b[32mPASS\x1b[0m all tests",  // ANSI stripped
+ * });
+ *
+ * // Desktop accessibility
+ * const desktopHash = computeDesktopStateHash({
+ *   app_name: "Firefox",
+ *   window_title: "  GitHub - My Repo  ",  // Whitespace normalized
+ *   focused_role: "button",
+ *   focused_name: "Submit",
+ * });
+ * ```
+ *
+ * @module canonicalization
+ */
+// =============================================================================
+// Re-exports: Utilities
+// =============================================================================
+export { 
+// Text normalization
+normalizeText, normalizeCommand, 
+// ANSI and timestamp handling
+stripAnsi, normalizeTimestamps, 
+// Transcript normalization
+normalizeTranscript, 
+// Path normalization
+normalizePath, 
+// Environment hashing
+isSecretKey, hashEnvironment, 
+// Core hashing
+sha256, } from "./utils.js";
+// =============================================================================
+// Re-exports: Terminal Canonicalization
+// =============================================================================
+export { 
+// Functions
+canonicalizeTerminalSnapshot, computeTerminalStateHash, 
+// Schema version
+TERMINAL_SCHEMA_VERSION, } from "./terminal.js";
+// =============================================================================
+// Re-exports: Desktop Canonicalization
+// =============================================================================
+export { 
+// Functions
+canonicalizeAccessibilityNode, buildFocusedPath, canonicalizeDesktopSnapshot, computeDesktopStateHash, 
+// Schema version
+DESKTOP_SCHEMA_VERSION, } from "./desktop.js";
+//# sourceMappingURL=index.js.map

package/dist/canonicalization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/canonicalization/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,OAAO;AAGL,qBAAqB;AACrB,aAAa,EACb,gBAAgB;AAChB,8BAA8B;AAC9B,SAAS,EACT,mBAAmB;AACnB,2BAA2B;AAC3B,mBAAmB;AACnB,qBAAqB;AACrB,aAAa;AACb,sBAAsB;AACtB,WAAW,EACX,eAAe;AACf,eAAe;AACf,MAAM,GACP,MAAM,YAAY,CAAC;AAEpB,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAEhF,OAAO;AAIL,YAAY;AACZ,4BAA4B,EAC5B,wBAAwB;AACxB,iBAAiB;AACjB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,gFAAgF;AAChF,uCAAuC;AACvC,gFAAgF;AAEhF,OAAO;AAML,YAAY;AACZ,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB;AACvB,iBAAiB;AACjB,sBAAsB,GACvB,MAAM,cAAc,CAAC"}

package/dist/canonicalization/terminal.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Terminal session canonicalization for reproducible state hashes.
+ *
+ * This module provides canonical normalization for terminal sessions,
+ * ensuring that equivalent terminal states produce identical hashes
+ * regardless of superficial differences (whitespace, ANSI codes, timestamps).
+ */
+import { type Platform } from "./utils.js";
+/**
+ * Raw terminal session snapshot from the runtime environment.
+ */
+export interface TerminalSessionSnapshot {
+    session_id: string;
+    terminal_id?: string;
+    cwd?: string;
+    command?: string;
+    transcript?: string;
+    exit_code?: number | null;
+    env?: Record<string, string>;
+    platform?: Platform;
+    observed_at?: string;
+}
+/**
+ * Canonical terminal snapshot with normalized fields.
+ *
+ * This is the deterministic representation used for hashing.
+ */
+export interface CanonicalTerminalSnapshot {
+    session_id: string;
+    terminal_id: string;
+    cwd_normalized: string;
+    command_normalized: string;
+    transcript_normalized: string;
+    exit_code: number | null;
+    env_hash: string;
+    platform: Platform;
+}
+/**
+ * Canonicalize a terminal session snapshot.
+ *
+ * Normalizes all fields to produce a deterministic representation:
+ * - `cwd`: Resolved to absolute path
+ * - `command`: Trimmed and whitespace-collapsed (case preserved)
+ * - `transcript`: ANSI stripped, timestamps normalized, whitespace collapsed
+ * - `env`: Sorted, secrets redacted, then hashed
+ *
+ * @param snapshot - Raw terminal session snapshot
+ * @returns Canonical snapshot for hashing
+ */
+export declare function canonicalizeTerminalSnapshot(snapshot: TerminalSessionSnapshot): CanonicalTerminalSnapshot;
+/**
+ * Compute state hash for a terminal session snapshot.
+ *
+ * The hash includes all canonical fields in a deterministic order.
+ * Platform is included because different platforms have different
+ * security contexts (e.g., Unix vs Windows permissions).
+ *
+ * @param snapshot - Raw or canonical terminal snapshot
+ * @returns SHA-256 hash prefixed with "sha256:"
+ */
+export declare function computeTerminalStateHash(snapshot: TerminalSessionSnapshot | CanonicalTerminalSnapshot): string;
+/**
+ * Current schema version for terminal canonicalization.
+ *
+ * Increment major version for breaking changes to canonical format.
+ * Increment minor version for additions that don't change existing hashes.
+ */
+export declare const TERMINAL_SCHEMA_VERSION = "terminal:v1.0";
+//# sourceMappingURL=terminal.d.ts.map

package/dist/canonicalization/terminal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/canonicalization/terminal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,KAAK,QAAQ,EAMd,MAAM,YAAY,CAAC;AAMpB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,uBAAuB,GAChC,yBAAyB,CAa3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,GAAG,yBAAyB,GAC5D,MAAM,CAmBR;AAoCD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,kBAAkB,CAAC"}

package/dist/canonicalization/terminal.js

@@ -0,0 +1,98 @@
+/**
+ * Terminal session canonicalization for reproducible state hashes.
+ *
+ * This module provides canonical normalization for terminal sessions,
+ * ensuring that equivalent terminal states produce identical hashes
+ * regardless of superficial differences (whitespace, ANSI codes, timestamps).
+ */
+import { hashEnvironment, normalizeCommand, normalizePath, normalizeTranscript, sha256, } from "./utils.js";
+// =============================================================================
+// Canonicalization
+// =============================================================================
+/**
+ * Canonicalize a terminal session snapshot.
+ *
+ * Normalizes all fields to produce a deterministic representation:
+ * - `cwd`: Resolved to absolute path
+ * - `command`: Trimmed and whitespace-collapsed (case preserved)
+ * - `transcript`: ANSI stripped, timestamps normalized, whitespace collapsed
+ * - `env`: Sorted, secrets redacted, then hashed
+ *
+ * @param snapshot - Raw terminal session snapshot
+ * @returns Canonical snapshot for hashing
+ */
+export function canonicalizeTerminalSnapshot(snapshot) {
+    const platform = snapshot.platform ?? detectPlatform();
+    return {
+        session_id: snapshot.session_id,
+        terminal_id: snapshot.terminal_id ?? "",
+        cwd_normalized: normalizePath(snapshot.cwd),
+        command_normalized: normalizeCommand(snapshot.command),
+        transcript_normalized: normalizeTranscript(snapshot.transcript),
+        exit_code: snapshot.exit_code ?? null,
+        env_hash: hashEnvironment(snapshot.env),
+        platform,
+    };
+}
+/**
+ * Compute state hash for a terminal session snapshot.
+ *
+ * The hash includes all canonical fields in a deterministic order.
+ * Platform is included because different platforms have different
+ * security contexts (e.g., Unix vs Windows permissions).
+ *
+ * @param snapshot - Raw or canonical terminal snapshot
+ * @returns SHA-256 hash prefixed with "sha256:"
+ */
+export function computeTerminalStateHash(snapshot) {
+    // Canonicalize if not already canonical
+    const canonical = isCanonicalTerminalSnapshot(snapshot)
+        ? snapshot
+        : canonicalizeTerminalSnapshot(snapshot);
+    // Build deterministic JSON (sorted keys)
+    const hashInput = JSON.stringify({
+        command_normalized: canonical.command_normalized,
+        cwd_normalized: canonical.cwd_normalized,
+        env_hash: canonical.env_hash,
+        exit_code: canonical.exit_code,
+        platform: canonical.platform,
+        session_id: canonical.session_id,
+        terminal_id: canonical.terminal_id,
+        transcript_normalized: canonical.transcript_normalized,
+    });
+    return `sha256:${sha256(hashInput)}`;
+}
+// =============================================================================
+// Helpers
+// =============================================================================
+/**
+ * Detect the current platform.
+ */
+function detectPlatform() {
+    const p = process.platform;
+    if (p === "darwin" || p === "linux" || p === "win32") {
+        return p;
+    }
+    // Default to linux for unknown Unix-like platforms
+    return "linux";
+}
+/**
+ * Type guard to check if a snapshot is already canonical.
+ */
+function isCanonicalTerminalSnapshot(snapshot) {
+    return ("cwd_normalized" in snapshot &&
+        "command_normalized" in snapshot &&
+        "transcript_normalized" in snapshot &&
+        "env_hash" in snapshot);
+}
+// =============================================================================
+// Schema Version
+// =============================================================================
+/**
+ * Current schema version for terminal canonicalization.
+ *
+ * Increment major version for breaking changes to canonical format.
+ * Increment minor version for additions that don't change existing hashes.
+ */
+export const TERMINAL_SCHEMA_VERSION = "terminal:v1.0";
+//# sourceMappingURL=terminal.js.map

package/dist/canonicalization/terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/canonicalization/terminal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAEL,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,MAAM,GACP,MAAM,YAAY,CAAC;AAqCpB,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAiC;IAEjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IAEvD,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC3C,kBAAkB,EAAE,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtD,qBAAqB,EAAE,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/D,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;QACrC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;QACvC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA6D;IAE7D,wCAAwC;IACxC,MAAM,SAAS,GAAG,2BAA2B,CAAC,QAAQ,CAAC;QACrD,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAE3C,yCAAyC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;KACvD,CAAC,CAAC;IAEH,OAAO,UAAU,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;GAEG;AACH,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,mDAAmD;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAClC,QAA6D;IAE7D,OAAO,CACL,gBAAgB,IAAI,QAAQ;QAC5B,oBAAoB,IAAI,QAAQ;QAChC,uBAAuB,IAAI,QAAQ;QACnC,UAAU,IAAI,QAAQ,CACvB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC"}

package/dist/canonicalization/utils.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Shared canonicalization utilities for non-web contexts.
+ *
+ * These utilities provide consistent normalization for terminal and desktop
+ * accessibility snapshots, ensuring reproducible state hashes.
+ */
+export type Platform = "darwin" | "linux" | "win32";
+/**
+ * Normalize text for canonical comparison.
+ *
+ * Transforms:
+ * - Trims leading/trailing whitespace
+ * - Collapses internal whitespace to single spaces
+ * - Lowercases (for non-command text)
+ * - Caps length
+ *
+ * @param text - Input text (may be null/undefined)
+ * @param maxLen - Maximum length to retain (default: 80)
+ * @returns Normalized text string (empty string if input is null/undefined)
+ */
+export declare function normalizeText(text: string | null | undefined, maxLen?: number): string;
+/**
+ * Normalize a command string.
+ *
+ * Unlike normalizeText, this preserves case (commands are case-sensitive)
+ * but still trims and collapses whitespace.
+ *
+ * @param cmd - Command string
+ * @returns Normalized command
+ */
+export declare function normalizeCommand(cmd: string | null | undefined): string;
+/**
+ * Remove all ANSI escape sequences from text.
+ *
+ * Handles:
+ * - Color codes: \x1b[31m (red), \x1b[0m (reset)
+ * - Cursor movement: \x1b[2J (clear screen)
+ * - Terminal control sequences
+ *
+ * @param text - Text potentially containing ANSI codes
+ * @returns Text with ANSI codes removed
+ */
+export declare function stripAnsi(text: string): string;
+/**
+ * Replace common timestamp patterns with placeholder.
+ *
+ * This ensures that transcript hashes remain stable across runs
+ * even when timestamps differ.
+ *
+ * @param text - Text potentially containing timestamps
+ * @returns Text with timestamps replaced by [TIMESTAMP]
+ */
+export declare function normalizeTimestamps(text: string): string;
+/**
+ * Normalize a terminal transcript for canonical hashing.
+ *
+ * Steps:
+ * 1. Strip ANSI escape codes
+ * 2. Normalize timestamps
+ * 3. For each line: trim trailing whitespace, collapse internal whitespace
+ * 4. Remove empty trailing lines
+ * 5. Cap total length
+ *
+ * @param transcript - Raw terminal transcript
+ * @returns Normalized transcript
+ */
+export declare function normalizeTranscript(transcript: string | null | undefined): string;
+/**
+ * Normalize a file system path for canonical hashing.
+ *
+ * Handles:
+ * - Home directory expansion (~ on Unix, %USERPROFILE% on Windows)
+ * - Resolution of . and ..
+ * - Conversion to absolute path
+ * - Lowercase drive letter on Windows
+ *
+ * Note: Symlink resolution is not performed (would require async fs.realpath).
+ *
+ * @param inputPath - Path to normalize
+ * @returns Normalized absolute path in OS-native format
+ */
+export declare function normalizePath(inputPath: string | null | undefined): string;
+/**
+ * Check if an environment variable key indicates a secret value.
+ *
+ * @param key - Environment variable name
+ * @returns True if the key matches a secret pattern
+ */
+export declare function isSecretKey(key: string): boolean;
+/**
+ * Hash environment variables for canonical representation.
+ *
+ * - Redacts values for keys matching secret patterns
+ * - Sorts keys for determinism
+ * - Returns SHA-256 hash of canonical representation
+ *
+ * @param env - Environment variables
+ * @returns SHA-256 hash of canonical env representation
+ */
+export declare function hashEnvironment(env: Record<string, string> | null | undefined): string;
+/**
+ * Compute SHA-256 hash of input string.
+ *
+ * @param input - String to hash
+ * @returns Hex-encoded SHA-256 hash
+ */
+export declare function sha256(input: string): string;
+//# sourceMappingURL=utils.d.ts.map

package/dist/canonicalization/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/canonicalization/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAMpD;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,SAAK,GAAG,MAAM,CAelF;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAKvE;AAaD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAeD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMxD;AASD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CA8BjF;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CA4B1E;AAgBD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAkBtF;AAMD;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5C"}

package/dist/canonicalization/utils.js

@@ -0,0 +1,250 @@
+/**
+ * Shared canonicalization utilities for non-web contexts.
+ *
+ * These utilities provide consistent normalization for terminal and desktop
+ * accessibility snapshots, ensuring reproducible state hashes.
+ */
+import { createHash } from "node:crypto";
+import path from "node:path";
+// =============================================================================
+// Text Normalization
+// =============================================================================
+/**
+ * Normalize text for canonical comparison.
+ *
+ * Transforms:
+ * - Trims leading/trailing whitespace
+ * - Collapses internal whitespace to single spaces
+ * - Lowercases (for non-command text)
+ * - Caps length
+ *
+ * @param text - Input text (may be null/undefined)
+ * @param maxLen - Maximum length to retain (default: 80)
+ * @returns Normalized text string (empty string if input is null/undefined)
+ */
+export function normalizeText(text, maxLen = 80) {
+    if (!text)
+        return "";
+    // Trim and collapse whitespace
+    let normalized = text.split(/\s+/).join(" ").trim();
+    // Lowercase
+    normalized = normalized.toLowerCase();
+    // Cap length
+    if (normalized.length > maxLen) {
+        normalized = normalized.slice(0, maxLen);
+    }
+    return normalized;
+}
+/**
+ * Normalize a command string.
+ *
+ * Unlike normalizeText, this preserves case (commands are case-sensitive)
+ * but still trims and collapses whitespace.
+ *
+ * @param cmd - Command string
+ * @returns Normalized command
+ */
+export function normalizeCommand(cmd) {
+    if (!cmd)
+        return "";
+    // Trim and collapse whitespace only (preserve case)
+    return cmd.split(/\s+/).join(" ").trim();
+}
+// =============================================================================
+// ANSI Escape Code Handling
+// =============================================================================
+/**
+ * ANSI escape sequence pattern.
+ * Matches color codes, cursor movement, and terminal control sequences.
+ */
+// biome-ignore lint/suspicious/noControlCharactersInRegex: ANSI escape codes require matching control characters
+const ANSI_PATTERN = /\x1b\[[0-9;]*[a-zA-Z]/g;
+/**
+ * Remove all ANSI escape sequences from text.
+ *
+ * Handles:
+ * - Color codes: \x1b[31m (red), \x1b[0m (reset)
+ * - Cursor movement: \x1b[2J (clear screen)
+ * - Terminal control sequences
+ *
+ * @param text - Text potentially containing ANSI codes
+ * @returns Text with ANSI codes removed
+ */
+export function stripAnsi(text) {
+    return text.replace(ANSI_PATTERN, "");
+}
+// =============================================================================
+// Timestamp Normalization
+// =============================================================================
+/**
+ * Common timestamp patterns to normalize.
+ */
+const TIMESTAMP_PATTERNS = [
+    /\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:?\d{2})?/g, // ISO 8601
+    /\d{2}:\d{2}:\d{2}/g, // HH:MM:SS
+    /\[\d+\.\d+s\]/g, // Duration [1.23s]
+];
+/**
+ * Replace common timestamp patterns with placeholder.
+ *
+ * This ensures that transcript hashes remain stable across runs
+ * even when timestamps differ.
+ *
+ * @param text - Text potentially containing timestamps
+ * @returns Text with timestamps replaced by [TIMESTAMP]
+ */
+export function normalizeTimestamps(text) {
+    let result = text;
+    for (const pattern of TIMESTAMP_PATTERNS) {
+        result = result.replace(pattern, "[TIMESTAMP]");
+    }
+    return result;
+}
+// =============================================================================
+// Transcript Normalization
+// =============================================================================
+/** Maximum transcript length in bytes (10KB) */
+const MAX_TRANSCRIPT_LENGTH = 10 * 1024;
+/**
+ * Normalize a terminal transcript for canonical hashing.
+ *
+ * Steps:
+ * 1. Strip ANSI escape codes
+ * 2. Normalize timestamps
+ * 3. For each line: trim trailing whitespace, collapse internal whitespace
+ * 4. Remove empty trailing lines
+ * 5. Cap total length
+ *
+ * @param transcript - Raw terminal transcript
+ * @returns Normalized transcript
+ */
+export function normalizeTranscript(transcript) {
+    if (!transcript)
+        return "";
+    // Strip ANSI codes first
+    let normalized = stripAnsi(transcript);
+    // Normalize timestamps
+    normalized = normalizeTimestamps(normalized);
+    // Process line by line
+    const lines = normalized.split("\n").map((line) => {
+        // Trim trailing whitespace
+        let processed = line.trimEnd();
+        // Collapse internal whitespace (tabs -> space, multiple spaces -> single)
+        processed = processed.replace(/\t/g, " ").replace(/ +/g, " ");
+        return processed;
+    });
+    // Remove empty trailing lines
+    while (lines.length > 0 && lines[lines.length - 1] === "") {
+        lines.pop();
+    }
+    // Join and cap length
+    let result = lines.join("\n");
+    if (result.length > MAX_TRANSCRIPT_LENGTH) {
+        result = result.slice(0, MAX_TRANSCRIPT_LENGTH);
+    }
+    return result;
+}
+// =============================================================================
+// Path Normalization
+// =============================================================================
+/**
+ * Normalize a file system path for canonical hashing.
+ *
+ * Handles:
+ * - Home directory expansion (~ on Unix, %USERPROFILE% on Windows)
+ * - Resolution of . and ..
+ * - Conversion to absolute path
+ * - Lowercase drive letter on Windows
+ *
+ * Note: Symlink resolution is not performed (would require async fs.realpath).
+ *
+ * @param inputPath - Path to normalize
+ * @returns Normalized absolute path in OS-native format
+ */
+export function normalizePath(inputPath) {
+    if (!inputPath)
+        return "";
+    let normalized = inputPath;
+    // Expand home directory (cross-platform)
+    if (normalized.startsWith("~")) {
+        // Unix/macOS: ~/foo -> /Users/name/foo
+        normalized = normalized.replace(/^~/, process.env.HOME || "");
+    }
+    else if (normalized.includes("%USERPROFILE%")) {
+        // Windows: %USERPROFILE%\foo -> C:\Users\name\foo
+        normalized = normalized.replace(/%USERPROFILE%/gi, process.env.USERPROFILE || "");
+    }
+    // Resolve . and .. (uses OS-native separators)
+    normalized = path.normalize(normalized);
+    // Convert to absolute if relative
+    if (!path.isAbsolute(normalized)) {
+        normalized = path.resolve(normalized);
+    }
+    // Windows: lowercase drive letter for consistency (C: -> c:)
+    if (process.platform === "win32" && /^[A-Z]:/.test(normalized)) {
+        normalized = normalized[0].toLowerCase() + normalized.slice(1);
+    }
+    return normalized;
+}
+// =============================================================================
+// Environment Variable Hashing
+// =============================================================================
+/**
+ * Patterns that indicate an environment variable contains a secret.
+ */
+const SECRET_PATTERNS = [
+    /^(AWS_|AZURE_|GCP_|GOOGLE_)/i, // Cloud providers
+    /(_KEY|_SECRET|_TOKEN|_PASSWORD)$/i, // Common suffixes
+    /^(API_KEY|AUTH_TOKEN|PRIVATE_KEY)$/i, // Common names
+    /^(DATABASE_URL|REDIS_URL)$/i, // Connection strings
+];
+/**
+ * Check if an environment variable key indicates a secret value.
+ *
+ * @param key - Environment variable name
+ * @returns True if the key matches a secret pattern
+ */
+export function isSecretKey(key) {
+    return SECRET_PATTERNS.some((p) => p.test(key));
+}
+/**
+ * Hash environment variables for canonical representation.
+ *
+ * - Redacts values for keys matching secret patterns
+ * - Sorts keys for determinism
+ * - Returns SHA-256 hash of canonical representation
+ *
+ * @param env - Environment variables
+ * @returns SHA-256 hash of canonical env representation
+ */
+export function hashEnvironment(env) {
+    if (!env)
+        return sha256("");
+    // Filter out secrets
+    const safeEnv = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (isSecretKey(key)) {
+            safeEnv[key] = "[REDACTED]";
+        }
+        else {
+            safeEnv[key] = value;
+        }
+    }
+    // Sort keys for determinism
+    const sortedKeys = Object.keys(safeEnv).sort();
+    const canonical = sortedKeys.map((k) => `${k}=${safeEnv[k]}`).join("\n");
+    return sha256(canonical);
+}
+// =============================================================================
+// Hashing
+// =============================================================================
+/**
+ * Compute SHA-256 hash of input string.
+ *
+ * @param input - String to hash
+ * @returns Hex-encoded SHA-256 hash
+ */
+export function sha256(input) {
+    return createHash("sha256").update(input, "utf8").digest("hex");
+}
+//# sourceMappingURL=utils.js.map

package/dist/canonicalization/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/canonicalization/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAQ7B,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,IAA+B,EAAE,MAAM,GAAG,EAAE;IACxE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,+BAA+B;IAC/B,IAAI,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEpD,YAAY;IACZ,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAEtC,aAAa;IACb,IAAI,UAAU,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC/B,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAA8B;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,oDAAoD;IACpD,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;GAGG;AACH,iHAAiH;AACjH,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,sEAAsE,EAAE,WAAW;IACnF,oBAAoB,EAAE,WAAW;IACjC,gBAAgB,EAAE,mBAAmB;CACtC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,gDAAgD;AAChD,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAqC;IACvE,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAE3B,yBAAyB;IACzB,IAAI,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAEvC,uBAAuB;IACvB,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAE7C,uBAAuB;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAChD,2BAA2B;QAC3B,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,8BAA8B;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAC1C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,SAAoC;IAChE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,IAAI,UAAU,GAAG,SAAS,CAAC;IAE3B,yCAAyC;IACzC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,uCAAuC;QACvC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChD,kDAAkD;QAClD,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,+CAA+C;IAC/C,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAExC,kCAAkC;IAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,eAAe,GAAG;IACtB,8BAA8B,EAAE,kBAAkB;IAClD,mCAAmC,EAAE,kBAAkB;IACvD,qCAAqC,EAAE,eAAe;IACtD,6BAA6B,EAAE,qBAAqB;CACrD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,GAA8C;IAC5E,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;IAE5B,qBAAqB;IACrB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC"}

package/dist/evidence/non-web.d.ts

@@ -33,6 +33,13 @@ export interface TerminalStateEvidenceOptions {
     schemaVersion?: string;
     confidence?: number;
     hasher?: EvidenceHasher;
+    /**
+     * Use canonical hashing with proper normalization.
+     * When true, applies ANSI stripping, timestamp normalization, whitespace
+     * collapsing, and other canonicalization rules for reproducible hashes.
+     * @default false (legacy mode for backward compatibility)
+     */
+    useCanonicalHash?: boolean;
 }
 export interface DesktopStateEvidenceOptions {
     snapshot: DesktopAccessibilitySnapshot;
@@ -40,6 +47,13 @@ export interface DesktopStateEvidenceOptions {
     schemaVersion?: string;
     confidence?: number;
     hasher?: EvidenceHasher;
+    /**
+     * Use canonical hashing with proper normalization.
+     * When true, applies text normalization, tree sorting, and other
+     * canonicalization rules for reproducible hashes.
+     * @default false (legacy mode for backward compatibility)
+     */
+    useCanonicalHash?: boolean;
 }
 export declare function buildTerminalStateEvidence(options: TerminalStateEvidenceOptions): StateEvidence;
 export declare function buildDesktopAccessibilityStateEvidence(options: DesktopStateEvidenceOptions): StateEvidence;

package/dist/evidence/non-web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"non-web.d.ts","sourceRoot":"","sources":["../../src/evidence/non-web.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAE9G,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;AAE1D,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,wBAAwB;IACvC,uBAAuB,IAAI,OAAO,CAAC,uBAAuB,CAAC,GAAG,uBAAuB,CAAC;CACvF;AAED,MAAM,WAAW,oCAAoC;IACnD,4BAA4B,IACxB,OAAO,CAAC,4BAA4B,CAAC,GACrC,4BAA4B,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B;IACzC,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC;CACpF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,uBAAuB,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,4BAA4B,GAAG,aAAa,CAQ/F;AAED,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,2BAA2B,GACnC,aAAa,CAQf;AAED,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAE/B"}
+{"version":3,"file":"non-web.d.ts","sourceRoot":"","sources":["../../src/evidence/non-web.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAE9G,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;AAE1D,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,wBAAwB;IACvC,uBAAuB,IAAI,OAAO,CAAC,uBAAuB,CAAC,GAAG,uBAAuB,CAAC;CACvF;AAED,MAAM,WAAW,oCAAoC;IACnD,4BAA4B,IACxB,OAAO,CAAC,4BAA4B,CAAC,GACrC,4BAA4B,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B;IACzC,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC;CACpF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,uBAAuB,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,4BAA4B,GAAG,aAAa,CA2B/F;AAED,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,2BAA2B,GACnC,aAAa,CA2Bf;AAED,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAE/B"}

package/dist/evidence/non-web.js

@@ -1,18 +1,55 @@
+import { DESKTOP_SCHEMA_VERSION, TERMINAL_SCHEMA_VERSION, computeDesktopStateHash, computeTerminalStateHash, } from "../canonicalization/index.js";
 export function buildTerminalStateEvidence(options) {
-    const stateHash = options.stateHash ?? hashMaterial(materializeTerminalSnapshot(options.snapshot), options.hasher);
+    let stateHash;
+    let schemaVersion;
+    if (options.useCanonicalHash) {
+        // Use canonical hashing with proper normalization
+        const canonicalInput = {
+            session_id: options.snapshot.session_id ?? "",
+            terminal_id: options.snapshot.terminal_id,
+            cwd: options.snapshot.cwd,
+            command: options.snapshot.command,
+            transcript: options.snapshot.transcript_hash, // Note: expects raw transcript, not pre-hashed
+        };
+        stateHash = options.stateHash ?? computeTerminalStateHash(canonicalInput);
+        schemaVersion = options.schemaVersion ?? TERMINAL_SCHEMA_VERSION;
+    }
+    else {
+        // Legacy mode for backward compatibility
+        stateHash = options.stateHash ?? hashMaterial(materializeTerminalSnapshot(options.snapshot), options.hasher);
+        schemaVersion = options.schemaVersion ?? "terminal-v1";
+    }
     return {
         source: "terminal",
         state_hash: stateHash,
-        schema_version: options.schemaVersion ?? "terminal-v1",
+        schema_version: schemaVersion,
         confidence: options.confidence ?? options.snapshot.confidence,
     };
 }
 export function buildDesktopAccessibilityStateEvidence(options) {
-    const stateHash = options.stateHash ?? hashMaterial(materializeDesktopSnapshot(options.snapshot), options.hasher);
+    let stateHash;
+    let schemaVersion;
+    if (options.useCanonicalHash) {
+        // Use canonical hashing with proper normalization
+        const canonicalInput = {
+            app_name: options.snapshot.app_name,
+            window_title: options.snapshot.window_title,
+            focused_role: options.snapshot.focused_role,
+            focused_name: options.snapshot.focused_name,
+            ui_tree_text: options.snapshot.ui_tree_hash, // Note: expects raw text, not pre-hashed
+        };
+        stateHash = options.stateHash ?? computeDesktopStateHash(canonicalInput);
+        schemaVersion = options.schemaVersion ?? DESKTOP_SCHEMA_VERSION;
+    }
+    else {
+        // Legacy mode for backward compatibility
+        stateHash = options.stateHash ?? hashMaterial(materializeDesktopSnapshot(options.snapshot), options.hasher);
+        schemaVersion = options.schemaVersion ?? "desktop-a11y-v1";
+    }
     return {
         source: "desktop_accessibility",
         state_hash: stateHash,
-        schema_version: options.schemaVersion ?? "desktop-a11y-v1",
+        schema_version: schemaVersion,
         confidence: options.confidence ?? options.snapshot.confidence,
     };
 }

package/dist/evidence/non-web.js.map

@@ -1 +1 @@
-{"version":3,"file":"non-web.js","sourceRoot":"","sources":["../../src/evidence/non-web.ts"],"names":[],"mappings":"AAuDA,MAAM,UAAU,0BAA0B,CAAC,OAAqC;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACnH,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,OAAO,CAAC,aAAa,IAAI,aAAa;QACtD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,OAAoC;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClH,OAAO;QACL,MAAM,EAAE,uBAAuB;QAC/B,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,OAAO,CAAC,aAAa,IAAI,iBAAiB;QAC1D,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAoC;IAEpC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,0BAA0B,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAiC;IACpE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;QAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;QACrC,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,EAAE;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;QACrC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAsC;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;QACrC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,MAAuB;IAC7D,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"non-web.js","sourceRoot":"","sources":["../../src/evidence/non-web.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,sBAAsB,EACtB,uBAAuB,EAGvB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AAsEtC,MAAM,UAAU,0BAA0B,CAAC,OAAqC;IAC9E,IAAI,SAAiB,CAAC;IACtB,IAAI,aAAqB,CAAC;IAE1B,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,kDAAkD;QAClD,MAAM,cAAc,GAA2B;YAC7C,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE;YAC7C,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;YACzC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG;YACzB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,+CAA+C;SAC9F,CAAC;QACF,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,wBAAwB,CAAC,cAAc,CAAC,CAAC;QAC1E,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7G,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IACzD,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,OAAoC;IAEpC,IAAI,SAAiB,CAAC;IACtB,IAAI,aAAqB,CAAC;IAE1B,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,kDAAkD;QAClD,MAAM,cAAc,GAA0B;YAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;YACnC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;YAC3C,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;YAC3C,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;YAC3C,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,yCAAyC;SACvF,CAAC;QACF,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC,cAAc,CAAC,CAAC;QACzE,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5G,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,iBAAiB,CAAC;IAC7D,CAAC;IAED,OAAO;QACL,MAAM,EAAE,uBAAuB;QAC/B,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAoC;IAEpC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,0BAA0B,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAiC;IACpE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;QAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;QACrC,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,EAAE;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;QACrC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAsC;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;QACrC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,MAAuB;IAC7D,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC"}

package/dist/index.d.ts

@@ -8,6 +8,7 @@ export { ActionGuard, AuthorizationDeniedError, type ActionExecutionResult, type
 export { guardedFileRead, guardedFileWrite, guardedHttp, guardedShell, type GuardedFileReadOptions, type GuardedFileWriteOptions, type GuardedHttpOptions, type GuardedShellOptions, } from "./wrappers/sensitive-operations.js";
 export { buildWebStateEvidenceFromRuntimeSnapshot, buildWebStateEvidence, type RuntimeSnapshotLike, type WebStateEvidenceOptions, type WebStateSnapshot, webStateSnapshotFromRuntimeSnapshot, } from "./evidence/web-state.js";
 export { buildDesktopAccessibilityStateEvidence, buildTerminalStateEvidence, collectVerificationEvidence, type DesktopAccessibilityEvidenceProvider, type DesktopAccessibilitySnapshot, type DesktopStateEvidenceOptions, type EvidenceHasher, type TerminalEvidenceProvider, type TerminalSessionSnapshot, type TerminalStateEvidenceOptions, type VerificationSignalProvider, } from "./evidence/non-web.js";
+export { type Platform, type TerminalSessionSnapshot as CanonicalTerminalInput, type CanonicalTerminalSnapshot, type AccessibilityNode, type DesktopAccessibilitySnapshot as CanonicalDesktopInput, type CanonicalAccessibilityNode, type CanonicalDesktopSnapshot, normalizeText, normalizeCommand, stripAnsi, normalizeTimestamps, normalizeTranscript, normalizePath, isSecretKey, hashEnvironment, sha256, canonicalizeTerminalSnapshot, computeTerminalStateHash, TERMINAL_SCHEMA_VERSION, canonicalizeAccessibilityNode, buildFocusedPath, canonicalizeDesktopSnapshot, computeDesktopStateHash, DESKTOP_SCHEMA_VERSION, } from "./canonicalization/index.js";
 export interface AuthorityClientOptions {
     baseUrl: string;
     timeoutMs?: number;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAGtB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,aAAa,EACb,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,UAAU,EACV,uBAAuB,EACvB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,KAAK,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wCAAwC,EACxC,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,mCAAmC,GACpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sCAAsC,EACtC,0BAA0B,EAC1B,2BAA2B,EAC3B,KAAK,oCAAoC,EACzC,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,eAAe,GAAG,YAAY,CAAC;CAC/C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;gBAElD,OAAO,EAAE,sBAAsB;IAQrC,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAoE3E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAGtB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,aAAa,EACb,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,UAAU,EACV,uBAAuB,EACvB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,KAAK,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wCAAwC,EACxC,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,mCAAmC,GACpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sCAAsC,EACtC,0BAA0B,EAC1B,2BAA2B,EAC3B,KAAK,oCAAoC,EACzC,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,uBAAuB,IAAI,sBAAsB,EACtD,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,4BAA4B,IAAI,qBAAqB,EAC1D,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAE7B,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,eAAe,EACf,MAAM,EAEN,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,EAEvB,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,eAAe,GAAG,YAAY,CAAC;CAC/C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;gBAElD,OAAO,EAAE,sBAAsB;IAQrC,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAoE3E"}

package/dist/index.js

@@ -8,6 +8,14 @@ export { ActionGuard, AuthorizationDeniedError, } from "./guard/action-guard.js"
 export { guardedFileRead, guardedFileWrite, guardedHttp, guardedShell, } from "./wrappers/sensitive-operations.js";
 export { buildWebStateEvidenceFromRuntimeSnapshot, buildWebStateEvidence, webStateSnapshotFromRuntimeSnapshot, } from "./evidence/web-state.js";
 export { buildDesktopAccessibilityStateEvidence, buildTerminalStateEvidence, collectVerificationEvidence, } from "./evidence/non-web.js";
+// Canonicalization module for reproducible state hashes
+export { 
+// Utility functions
+normalizeText, normalizeCommand, stripAnsi, normalizeTimestamps, normalizeTranscript, normalizePath, isSecretKey, hashEnvironment, sha256, 
+// Terminal canonicalization
+canonicalizeTerminalSnapshot, computeTerminalStateHash, TERMINAL_SCHEMA_VERSION, 
+// Desktop canonicalization
+canonicalizeAccessibilityNode, buildFocusedPath, canonicalizeDesktopSnapshot, computeDesktopStateHash, DESKTOP_SCHEMA_VERSION, } from "./canonicalization/index.js";
 export class AuthorityClient {
     baseUrl;
     timeoutMs;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAGL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAsBpB,OAAO,EAAE,oBAAoB,EAAiC,MAAM,aAAa,CAAC;AAClF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAA0B,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,wBAAwB,GAGzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,GAKb,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wCAAwC,EACxC,qBAAqB,EAIrB,mCAAmC,GACpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sCAAsC,EACtC,0BAA0B,EAC1B,2BAA2B,GAS5B,MAAM,uBAAuB,CAAC;AAU/B,MAAM,OAAO,eAAe;IACT,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,gBAAgB,CAAS;IACzB,YAAY,CAAiC;IAE9D,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,IAAI,QAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE;wBAC5D,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;yBACnC;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;wBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;wBAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;wBACnD,SAAS;oBACX,CAAC;oBACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC1D,MAAM,IAAI,oBAAoB,CAAC,6BAA6B,EAAE;4BAC5D,IAAI,EAAE,SAAS;4BACf,KAAK,EAAE,KAAK;yBACb,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,EAAE;wBACzE,IAAI,EAAE,eAAe;wBACrB,KAAK,EAAE,KAAK;qBACb,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAEhD,2EAA2E;gBAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChE,OAAO,OAAO,CAAC;gBACjB,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;wBACxD,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;wBACnD,SAAS;oBACX,CAAC;oBACD,MAAM,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC/C,CAAC;gBAED,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,EAAE;wBACnE,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,OAAO,EAAE,OAAO;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,OAAO,CAAC;YACjB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,EAAE;YACzE,IAAI,EAAE,eAAe;SACtB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,EAAE;YACzE,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAAgB;IACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,oBAAoB,MAAM,EAAE,CAAC;IAC7E,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAC/C,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7D,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAGL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAsBpB,OAAO,EAAE,oBAAoB,EAAiC,MAAM,aAAa,CAAC;AAClF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAA0B,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,wBAAwB,GAGzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,GAKb,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wCAAwC,EACxC,qBAAqB,EAIrB,mCAAmC,GACpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sCAAsC,EACtC,0BAA0B,EAC1B,2BAA2B,GAS5B,MAAM,uBAAuB,CAAC;AAE/B,wDAAwD;AACxD,OAAO;AASL,oBAAoB;AACpB,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,eAAe,EACf,MAAM;AACN,4BAA4B;AAC5B,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB;AACvB,2BAA2B;AAC3B,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAUrC,MAAM,OAAO,eAAe;IACT,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,gBAAgB,CAAS;IACzB,YAAY,CAAiC;IAE9D,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,IAAI,QAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE;wBAC5D,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;yBACnC;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;wBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;wBAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;wBACnD,SAAS;oBACX,CAAC;oBACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC1D,MAAM,IAAI,oBAAoB,CAAC,6BAA6B,EAAE;4BAC5D,IAAI,EAAE,SAAS;4BACf,KAAK,EAAE,KAAK;yBACb,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,EAAE;wBACzE,IAAI,EAAE,eAAe;wBACrB,KAAK,EAAE,KAAK;qBACb,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAEhD,2EAA2E;gBAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChE,OAAO,OAAO,CAAC;gBACjB,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;wBACxD,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;wBACnD,SAAS;oBACX,CAAC;oBACD,MAAM,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC/C,CAAC;gBAED,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,EAAE;wBACnE,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,OAAO,EAAE,OAAO;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,OAAO,CAAC;YACjB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,EAAE;YACzE,IAAI,EAAE,eAAe;SACtB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,EAAE;YACzE,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAAgB;IACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,oBAAoB,MAAM,EAAE,CAAC;IAC7E,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAC/C,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7D,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@predicatesystems/authority",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "TypeScript authority SDK for Predicate Systems sidecar integration.",
   "license": "(MIT OR Apache-2.0)",
   "type": "module",